Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File:                     1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier:          2vGIa9SdTRZCZMUlPF9LwDhsGf2frEFv/GBcUD9ksY0=
Subject key identifier:   37:DF:CC:7A:78:0D:77:87:58:0C:C6:7D:B9:A8:5E:7B:37:A3:F0:B2
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer:       /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial:       019EC1B689D2A3089DCD87F0DB9996EFABE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number:          18EC
Signing time:             Sat 13 Jun 2026 16:00:25 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:25 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:25 +0000
Files and hashes:         1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: /MkXZrNGHtozwYfSlIg/TaAatCvAQnN+OpD6Hfz0Wlw=)
                          2: pXi_lWorquYMeFo_GByXEjAC2iQ.roa (hash: C5ppARZwdDpqOjifyYQPpcbZiTRFDLNkGmS29XOlq5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:89:d2:a3:08:9d:cd:87:f0:db:99:96:ef:ab:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
        Validity
            Not Before: Jun 13 16:00:25 2026 GMT
            Not After : Jun 14 16:00:25 2026 GMT
        Subject: CN=37dfcc7a780d7787580cc67db9a85e7b37a3f0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:97:be:09:7b:6e:63:12:80:bd:21:be:02:72:
                    a0:34:52:6e:2f:e1:f7:3d:5e:1e:16:72:2e:69:a1:
                    2c:13:ec:7c:aa:23:b4:78:d9:3d:36:a4:1a:b5:70:
                    ab:8f:47:b9:d4:e1:15:a1:b7:c5:cc:6b:1b:ff:ea:
                    18:c7:ec:06:c9:8c:b8:1b:17:b2:04:4d:0e:9e:e2:
                    cf:2c:e0:6e:23:29:c4:21:b4:93:da:e1:e8:a5:a2:
                    f3:ee:ae:75:41:0e:be:59:be:5b:f6:12:d3:f5:da:
                    3a:95:b1:71:af:2f:e8:a0:1c:54:39:2e:03:fe:88:
                    dd:13:b7:60:c1:ff:2a:46:58:ec:72:67:2f:6f:0b:
                    70:a5:4a:b7:ab:00:ef:ac:a2:27:b2:be:07:ff:ee:
                    7f:16:d3:5a:42:60:03:db:0f:f7:f1:09:2e:f1:5f:
                    c0:7b:9d:2a:29:df:a5:bd:da:7f:e3:72:01:bc:7b:
                    2a:51:b7:9b:1b:a1:9a:dd:b1:21:47:b7:5a:5a:f8:
                    80:af:da:20:26:de:c8:0c:f3:5f:a2:5e:25:b8:8d:
                    48:4c:9f:1e:31:db:9f:16:dc:9c:fa:9c:1b:d4:c9:
                    12:5e:46:5e:35:05:c4:5c:dc:db:91:4d:dc:91:0c:
                    64:da:b4:df:5e:15:4d:06:c9:0d:0e:06:7c:6e:85:
                    9a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DF:CC:7A:78:0D:77:87:58:0C:C6:7D:B9:A8:5E:7B:37:A3:F0:B2
            X509v3 Authority Key Identifier:
                keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f5:df:29:ed:07:46:fe:bb:41:e9:33:98:a3:f5:29:99:b2:
         3c:e3:06:68:55:2c:06:26:36:01:46:98:fe:f0:93:26:19:c7:
         74:6b:16:30:cd:16:89:1e:ee:36:84:ab:c1:3b:16:d0:f4:ab:
         cd:69:86:52:e8:f1:92:f5:96:b5:7b:04:59:56:e7:8f:60:c3:
         db:71:77:a7:db:22:0a:02:8b:06:b9:cd:a5:41:05:6b:7f:4a:
         cb:4a:5d:42:cc:f1:8e:01:5b:f5:6b:c5:b1:42:ac:59:38:c2:
         85:f6:6b:5b:e1:59:47:1f:6b:78:96:68:b2:f4:c9:ac:fe:14:
         32:54:04:72:38:d7:b1:13:5a:01:5b:2f:8a:ff:c7:c5:c8:52:
         b0:9f:57:62:49:42:36:23:4e:f4:30:90:40:01:ac:c2:ab:c5:
         4c:36:98:99:9a:37:2c:5f:03:74:08:2a:2a:76:9d:29:6a:64:
         fd:25:22:a3:0b:3e:30:5b:80:3e:c3:65:75:08:41:c5:62:0e:
         91:33:47:f9:7f:09:76:d2:6a:19:5f:40:a0:40:5e:f1:e6:bd:
         66:92:db:a0:1c:51:2c:17:e3:d2:d8:2a:2b:de:67:43:49:58:
         91:50:67:b4:1f:84:a3:c2:a1:2b:ce:15:fd:cd:80:ea:0d:52:
         b5:06:bd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:34:11 2026 by rpki-client